topic Re: Supplier remote access in Cloud Networking Platform

Supplier remote access

JohanPlukon — Thu, 22 Jun 2023 18:53:07 GMT

As a production company we have may external suppliers who deliver machines or software to support our product processes.

Many of these suppliers will always try to bring their own router to be able to support the machine or software.
Often these machines or software also need to exchange data with internal machines or software.

I need your opnion here. How do you handle situations like this? What kind of policy you have here. And what is the best solution in these situations? Place them behind a separate mx for each supplier?

Re: Supplier remote access

Philip D'Ath — Thu, 22 Jun 2023 19:43:58 GMT

I wouldn't allow third-party network equipment to be connected to your internal network.

I often put them on their own VLAN, for a VLAN separate from the internal network, and provide them with VPN access to their devices.

Re: Supplier remote access

BlakeRichardson — Thu, 22 Jun 2023 19:44:27 GMT

Place them behind a single MX with each on their own VLAN would be my suggestion although how many suppliers at any one time would you have onsite?

Re: Supplier remote access

aleabrahao — Thu, 22 Jun 2023 20:08:49 GMT

First time I hear about a supplier installing equipment inside the infrastructure.

A network for consultants is usually used and policies are created on what should and should not be accessed.

Re: Supplier remote access

pavement — Thu, 22 Jun 2023 20:39:57 GMT

agree with everyone, set up a separate VLAN just for them and if not required, just hand out a static IP.

Re: Supplier remote access

JohanPlukon — Fri, 23 Jun 2023 07:05:32 GMT

Then you have the same thought as me. But it is something that has been accepted for years, but in my opnion cant be any more.

Re: Supplier remote access

JohanPlukon — Fri, 23 Jun 2023 07:06:23 GMT

Thank you all for your answers. This helps me.

Re: Supplier remote access

JohanPlukon — Fri, 23 Jun 2023 07:07:49 GMT

It can vary, from one to ten or fifteen per location.

Depends on the level of automation within a location.

Re: Supplier remote access

Philip D'Ath — Fri, 23 Jun 2023 23:00:25 GMT

I agree. The threat landscape has evolved, and security systems and practices must evolve as a result.